Make your code immutable to avoid jail, policy exec advises devs